Forum Discussion
Does your SIP address match the user principal name ? Also how big is your group, the limit for batch assignment is 5000.
In general, I discuss with my client that they should have very few App Permission Policies, one for everyone and another for a small group of pilot users. While it's tempting to think of it as some kind of security control, it's not flexible enough, Permissions should live inside the apps that you are using.
The mapping should be dynamic, a export of the SIP ID and assigne to the Permission does not help. If found this workaround already in googlesearch
- StevenC365Nov 22, 2021MVP
It is not possible to have a dynamic assignment of a App Permission Policy to a group.
This script fetches all the member of a group then assigns those members to a policy, it's not dynamic and would only work with the groups member at the time you ran the script. The cmdlet its using accepts a list of SIP addresses, most companies match these to their email and upn, but it doesn't need to be. If it's not going to match I would be creating a loop in the script to find the SIP address of each user etc. Much longer process.
It doesn't' sound like it'll meet your requirement anyway, as I said before it's better to minimize the need to assign App Permission Policies.
- upfafferNov 28, 2021Brass ContributorThx but this not help in complex companies 😉